Static task
static1
Behavioral task
behavioral1
Sample
7959bb2f998155c5c75776519b8a51b8aeb96f450ff72477165e89f175480c79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7959bb2f998155c5c75776519b8a51b8aeb96f450ff72477165e89f175480c79.exe
Resource
win10v2004-20220901-en
General
-
Target
7959bb2f998155c5c75776519b8a51b8aeb96f450ff72477165e89f175480c79
-
Size
311KB
-
MD5
6ce757cff2de9eacfbe69cdce2c989c2
-
SHA1
6968baf98b77e37d11d45ceb39f9f0837271c466
-
SHA256
7959bb2f998155c5c75776519b8a51b8aeb96f450ff72477165e89f175480c79
-
SHA512
b5bc87b1d8f13043465f15aac6abed6a877ede9a837cfb8d2d10e9ec6dd98c88b1d151b0d608a3ddc666738abcf1ad67b9fe456609849abe7a437bc74ef803ec
-
SSDEEP
6144:+LqJeIlfvnGEOPLEphdav06q6NuC0pfwUvSWjmfP2B0qqCBQ:+L0nGBPA1a86trgwUTjmfjaQ
Malware Config
Signatures
Files
-
7959bb2f998155c5c75776519b8a51b8aeb96f450ff72477165e89f175480c79.exe windows x86
d80b151e45972f9b352ddaaa988530a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeA
lstrlenA
GetCurrentProcess
GetFileAttributesA
DeleteFileA
HeapFree
DeviceIoControl
GetStdHandle
VirtualProtectEx
GetCurrentThread
OpenMutexA
HeapDestroy
CreateEventW
GetStringTypeA
LoadLibraryA
FindVolumeClose
CloseHandle
LocalLock
DeviceIoControl
GetPrivateProfileIntW
GetPrivateProfileSectionA
uxtheme
GetThemeColor
IsThemeActive
DrawThemeBackground
CloseThemeData
GetThemeBool
CloseThemeData
GetWindowTheme
SetWindowTheme
OpenThemeData
GetThemeSysSize
GetThemeTextExtent
DrawThemeEdge
GetThemeTextMetrics
odbccp32
SQLInstallDriver
SQLConfigDataSource
SQLGetAvailableDrivers
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ